Privacy Policy

Last update: 12 April 2026

Privacy Policy

Version 2.0

MyStamp is a digital loyalty platform operated by Crown Software. We take the protection of your personal information seriously, and we have developed this Privacy Policy in line with the Protection of Personal Information Act (POPIA) and other applicable privacy legislation to inform you of your rights and how your information is used.

Should you have any questions or concerns relating to our handling of your Personal Information, please contact us at [email protected] with the subject line Privacy Policy.

Definitions and Interpretation

Words defined or assigned a meaning in the Terms will have that meaning in this Privacy Policy, unless the context clearly indicates otherwise. For purposes of this Privacy Policy:

  • "Data" means any data (including Personal Information) provided to us by a user;
  • "Personal Information" means any Data or information about an identifiable user and may include an ID number, a password, or email address;
  • "MyStamp" means the digital loyalty platform operated by Crown Software, accessible via the website and Mobile App;
  • "Mobile App" means the MyStamp mobile application available for download on iOS and Android devices.

Information We Collect

When you use MyStamp, we may collect the following types of information:

  • Account information: your name, email address, and phone number, provided when you register or update your profile;
  • Loyalty data: stamp card progress, vouchers earned and redeemed, and loyalty card numbers you add to your account;
  • Device information: device type and operating system, collected to provide technical support and ensure app compatibility;
  • Usage data: pages visited and features used, collected to improve the platform and your experience.

Collection

Collection on use: Once you visit the MyStamp website or use the Mobile App, you are not anonymous to us. When visiting or using our services, we may collect and use your Data. To combat online fraud, we may also record your IP address.

We do not intentionally gather Personal Information about users who are under the age of 13.

We automatically receive and record information on our server logs from the browser or app of a user, including an IP address, cookie information, and the page or screen requested. Each user should be aware that other websites visited before entering our site may place Personal Information within a URL of a user during a visit to it, and we have no control over such websites. Accordingly, a subsequent website that collects URL information may log some Personal Information.

Use

We may send administrative messages and email updates to a user regarding MyStamp.

In some cases, we may also send a user primarily promotional messages. A user can choose to opt-out of promotional messages by sending an email to [email protected] with the subject line OPT OUT.

Cookies

Personal Information may be used to improve MyStamp. We may use cookies to save the session validators of a user on its browsers and hard drives, and may use cookies to provide a tailored experience. Please read our Cookies Policy for more information.

Mobile Application

When you use the MyStamp Mobile App, the following device features may be accessed:

  • Camera: used solely to scan loyalty card barcodes to make it easier for you to add cards to the app. No images are stored or transmitted.
  • Device storage: the app stores loyalty card data, stamp cards, and vouchers locally on your device for offline access.
  • Push notifications: with your consent, we send push notifications about stamp progress, voucher rewards, and account updates. You can manage notification preferences in your device settings at any time.

Disclosure

We take client confidentiality very seriously. All information you send to us is held in the strictest confidentiality, subject to legislative reporting requirements.

We may be required to disclose any client information when it is required by law.

Crown Software will never sell or trade any customer information or participate in any market-related efforts that will require the use of client information or transaction data.

No Selling

We do not sell, share, or distribute Personal Information. No Personal Information may be disclosed to anyone except as provided in this Privacy Policy.

Third-Party Suppliers and Agents

We may provide Data to a third-party supplier (such as hosting services, or support services). Each third-party supplier is required to only disclose or use the Data for the purpose for which it was disclosed.

Law Enforcement

We may disclose Data if required: by a subpoena or other judicial or administrative order by law; to protect the safety of any individual or the general public; to prevent violation of the Terms, or our rights or the rights of any third party. An IP address may be disclosed to a third party: if the law or a legal process requires it; to protect the rights or property of Crown Software, a user, or the general public.

Abuse

We may disclose Data to designated third parties to resolve or investigate abuse complaints. We may release Data to assist in attempting to block an abusive user or complain to our Internet Service Provider of an abusive user.

Cross-Border Information Transfer

We may transmit or transfer Personal Information across international borders, outside the user's resident jurisdiction. Personal Information may be stored on servers located in another country where laws protecting Personal Information may not be as stringent as the laws in the jurisdiction of the user. Personal Information may be processed in the country where it was collected, as well as other countries where laws regarding processing of Personal Information may be less stringent.

Data Retention

We retain your personal information for as long as it is necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law. If you wish to request the deletion of your personal data, you may contact us at [email protected] with the subject line Privacy Policy. Please note that certain data may need to be retained for legal or operational purposes.

User Rights

You have the right to access, correct, or request the deletion of your personal data at any time. You may also request a copy of the personal information we hold about you. To exercise these rights, please contact us at [email protected] with the subject line Privacy Policy. Please note that we may require verification of your identity before fulfilling such requests.

Security Measures

We employ a variety of security measures to protect your personal data. These measures include encryption, firewalls, and secure server hosting. However, no system is completely secure, and we cannot guarantee the absolute security of your personal information. You are encouraged to take steps to protect your account, such as using strong passwords and keeping your login details confidential.

Changes to the Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Any changes to this policy will be posted on this page with an updated version number and date. We encourage you to review this policy periodically to stay informed about how we are protecting your information. If we make any significant changes, we will notify you through MyStamp or via email.

Third-Party Links

MyStamp may contain links to third-party websites. Please note that we are not responsible for the privacy practices or the content of these external sites. We encourage you to read the privacy policies of any third-party sites you visit.

Data Subject Requests

Under certain data protection laws, such as the Protection of Personal Information Act (POPIA) in South Africa, you may have additional rights related to your personal data. These may include the right to object to processing, the right to restrict processing, and the right to data portability. If you wish to exercise these rights, please contact us at [email protected] with the subject line Privacy Policy.